Hey everyone,

When using digest authentication on the web server, is it normal behavior for the web server to ask for the username and password twice when logging in?

I tried changing the 3rd line in login.ssjs from Basic to Digest, and Realm to DigestRealm but it gives the same results.

Thanks,
Skatin

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

Re: Digtest Autnentication Double Login Prompt
By: Skatin to All on Wed Apr 15 2015 05:25 pm

When using digest authentication on the web server, is it normal behavior for the web server to ask for the username and password twice when logging in?

No, that is not normal.

---
http://DuckDuckGo.com/ a better search engine that respects your privacy.
þ Synchronet þ My Brand-New BBS (All the cool SysOps run STOCK!)

When using digest authentication on the web server, is it normal behavior for the web server to ask for the username and password twice when logging in?

No, that is not normal.

Thanks Deuce! I guess I'll just keep an eye on the CVS for an updated login.ssjs file.

Kind regards,
Skatin

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

Re: Re: Digtest Autnentication Double Login Prompt
By: Skatin to Deuce on Wed Apr 22 2015 02:57 pm

When using digest authentication on the web server, is it normal behavior for the web server to ask for the username and password twice when logging in?

No, that is not normal.

Thanks Deuce! I guess I'll just keep an eye on the CVS for an updated login.ssjs file.

I'll need enough details on exactly how this is happening to be able to reproduce it. Once I can make it happen on my test BBS, I can fix it. Until then, I cant'.

How are you enabling Digest, what browsers are you seeing it in, are the Realm strings the same for both logins, what URIs are you seeing it at, etc.

---
http://DuckDuckGo.com/ a better search engine that respects your privacy.
þ Synchronet þ My Brand-New BBS (All the cool SysOps run STOCK!)

Re: Re: Digtest Autnentication Double Login Prompt
By: Skatin to Deuce on Wed Apr 22 2015 02:57 pm

When using digest authentication on the web server, is it normal behavior for the web server to ask for the username and password twice when logging in?

I'll need enough details on exactly how this is happening to be able to reproduce it. Once I can make it happen on my test BBS, I can fix it.

Hi Deuce,

If I set the web authentication method in /ctrl/sbbs.ini to
either "Digest,Basic" or "Basic,Digest", login.ssjs only displays the basic authentication login prompt in the latest Firefox and Internet Explorer.

If I set the web authentication method to only "Digest", then login.ssjs displays both the basic and digest login prompts simultaneously.

The only way I've been able to get the digest login prompt to even appear is by using Digest exclusively in /ctrl/sbbs.ini. But then, both basic and digest login prompts appear together (so the user must input a username and password twice before it logs into the website).

Thanks,
Skatin

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

Re: Re: Digest Authentication Double Login Prompt
By: Skatin to Deuce on Mon Apr 27 2015 08:53 am

Hi Deuce,

If I set the web authentication method in /ctrl/sbbs.ini to
either "Digest,Basic" or "Basic,Digest", login.ssjs only displays the basic authentication login prompt in the latest Firefox and Internet Explorer.

If I set the web authentication method to only "Digest", then login.ssjs displays both the basic and digest login prompts simultaneously.

The only way I've been able to get the digest login prompt to even appear is by using Digest exclusively in /ctrl/sbbs.ini. But then, both basic and digest login prompts appear together (so the user must input a username and password twice before it logs into the website).

The stock login.ssjs explicitly uses Basic authentication if the user is not already logged in. If Basic is disabled therefore, the BBS still won't authenticate the user.

A work-around is to create a webctrl.ini with the following three lines: [login.ssjs]
Authentication=Digest
AccessRequirements=REST NOT G

This will require a user to authenticate using digest as a non-guest user before they can even access the login.ssjs page... at which point, login.ssjs will redirect to index.ssjs.


---
http://DuckDuckGo.com/ a better search engine that respects your privacy.
þ Synchronet þ My Brand-New BBS (All the cool SysOps run STOCK!)

A work-around is to create a webctrl.ini with the following three lines: [login.ssjs]
Authentication=Digest
AccessRequirements=REST NOT G

This will require a user to authenticate using digest as a non-guest user before they can even access the login.ssjs page... at which point, login.ssjs will redirect to index.ssjs.

That works perfectly. Thank you for your time and assistance Deuce!

Kind regards,
Skatin

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net